CVE-Katalog
CVE-2026-50221
In OpenStack Swift before 2.37.2, proxy-server does…
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device) from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to redirect container update requests to an attacker-controlled server, enabling server-side request forgery. The SSRF requests expose internal cluster metadata including storage policy indexes, partition mappings, device names, and when at rest encryption is enabled, cipher text and initialization vectors for the container-level encryption key. The attacker can also cause "ghost listings" in arbitrary containers via the shard-range redirect mechanism.
- Schweregrad
- Medium · CVSS 6.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.22% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie-security | swift | 2.35.1-0+deb13u4 | Fixed | [CVE-2026-50221] |
| Debiantrixie | swift | 2.35.1-0+deb13u3 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debiansid | swift | 2.37.1-5 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debiansid | swift | 2.38.2-3 | Fixed | [CVE-2026-50221] |
| Debianforky | swift | 2.37.1-5 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debianforky | swift | 2.38.2-3 | Fixed | [CVE-2026-50221] |
| Debianbookworm-security | swift | 2.30.1-0+deb12u3 | Fixed | [CVE-2026-50221] |
| Debianbookworm | swift | 2.30.1-0+deb12u2 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| PipRelease not reported | swift | 2.37.2 | Fixed | [GHSA-H8RC-W822-Q8VQ] |
Showing 9 fix observations. All 14 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | swift | Not reported | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | swift | 2.35.3 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | swift | 2.36.2 | UnknownSource applicability is not established | Provider not reported |
| PipRelease not reported | swift | 2.37.2 | Fixed | [GHSA-H8RC-W822-Q8VQ] |
| UnknownRelease not reported | swift | 2.37.2 | UnknownSource applicability is not established | Provider not reported |
| Debianbookworm | swift | 2.30.1-0+deb12u1 | Affected | [CVE-2026-50221] |
| Debianbookworm | swift | 2.30.1-0+deb12u2 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debianbookworm-security | swift | 2.30.1-0+deb12u3 | Fixed | [CVE-2026-50221] |
| Debianforky | swift | 2.37.1-5 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debianforky | swift | 2.38.2-3 | Fixed | [CVE-2026-50221] |
| Debiansid | swift | 2.37.1-5 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debiansid | swift | 2.38.2-3 | Fixed | [CVE-2026-50221] |
| Debiantrixie | swift | 2.35.1-0+deb13u3 | FixedDistribution-reported fixed boundary | [CVE-2026-50221] |
| Debiantrixie-security | swift | 2.35.1-0+deb13u4 | Fixed | [CVE-2026-50221] |
Original provider fields
{
"package_releases": [
{
"name": "swift",
"status": "fixed",
"release": "sid",
"version": "2.38.2-3"
},
{
"name": "swift",
"status": "fixed",
"release": "forky",
"version": "2.38.2-3"
},
{
"name": "swift",
"status": "fixed",
"release": "trixie",
"version": "2.35.1-0+deb13u3"
},
{
"name": "swift",
"status": "fixed",
"release": "trixie-security",
"version": "2.35.1-0+deb13u4"
},
{
"name": "swift",
"status": "vulnerable",
"release": "bookworm",
"version": "2.30.1-0+deb12u1"
},
{
"name": "swift",
"status": "fixed",
"release": "bookworm-security",
"version": "2.30.1-0+deb12u3"
}
],
"fixed_versions": [
{
"bug": 1140678,
"name": "swift",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "2.37.1-5"
},
{
"bug": 1140678,
"name": "swift",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "2.37.1-5"
},
{
"bug": 1140678,
"name": "swift",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "2.35.1-0+deb13u3"
},
{
"bug": 1140678,
"name": "swift",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "2.30.1-0+deb12u2"
}
],
"distribution_packages": [
{
"name": "swift",
"fixed_version": "not yet fixed",
"applicability_unknown": true
},
{
"name": "swift",
"fixed_version": "2.35.3",
"applicability_unknown": true
},
{
"name": "swift",
"fixed_version": "2.36.2",
"applicability_unknown": true
},
{
"name": "swift",
"fixed_version": "2.37.2",
"applicability_unknown": true
},
{
"name": "swift",
"ecosystem": "pip",
"provider_url": "https://github.com/advisories/GHSA-h8rc-w822-q8vq",
"fixed_version": "2.37.2",
"provider_source": "github",
"provider_record_id": "GHSA-H8RC-W822-Q8VQ",
"provider_updated_at": "2026-09-24T19:02:20Z"
},
{
"name": "swift",
"ranges": [
{
"fixed": "2.37.2",
"introduced": "2.37.0",
"last_affected": "",
"start_excluding": ""
}
],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50221",
"fixed_version": "2.37.2",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-50221",
"provider_updated_at": "2026-10-25T23:10:00.167"
}
]
}OpenFactory catalog packages
Die Paketzuordnung läuft.
[Debian 12 (Bookworm)]
- [python3-swift]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift]Unbekannt
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-account]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-container]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-doc]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-drive-audit]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-object]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-object-expirer]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
- [swift-proxy]Unbekannt
Quellpaket: [swift]
Details (4)
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1· all · bookwormBetroffen · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u2· all · bookworm-securityBehoben · Behoben:
2.30.1-0+deb12u2nvd · swift · debian · bookworm; nvd · swift · debian · 12
[Debian 13 (Trixie)]
- [python3-swift]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift]Unbekannt
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-account]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-container]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-doc]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-drive-audit]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-object]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-object-expirer]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
- [swift-proxy]Unbekannt
Quellpaket: [swift]
Details (6)
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixieBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u2· all · trixie-security · Historical versionBetroffen · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u3· all · trixie-security · Historical versionBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
2.35.1-0+deb13u4· all · trixie-securityBehoben · Behoben:
2.35.1-0+deb13u3nvd · swift · debian · 13
Beobachtet:
Referenzen
- [http://www.openwall.com/lists/oss-security/2026/06/23/5]
- [https://github.com/advisories/GHSA-h8rc-w822-q8vq]
- [https://launchpad.net/bugs/2150261]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-50221]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-50221]
- [https://security-tracker.debian.org/tracker/CVE-2026-50221]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50221.json]
- [https://security.openstack.org/ossa/OSSA-2026-024.html]
- [https://www.openwall.com/lists/oss-security/2026/06/23/5]
[Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]